The Channel logo


By | John Leyden 15th April 2005 11:00

IM worm hits Reuters

Breaking news

Reuters was temporarily forced to shut down its instant messaging service Thursday after a computer worm spread across its network. The culprit - Kelvir-U - is a variant of a worm family that targets MSN and Windows Messenger clients and previously posed no risk to Reuters' tightly-controlled messaging network. This is the first incident where a virus has targeted a privately controlled user community, IM security firm IMlogic reports.

Security firm Akonix reports that it has received "multiple reports from organizations whose networks have been compromised by the Kelvir worm". It said the latest Kelvir variant is rapidly spreading over instant messaging (IM) networks.

Like other social engineering attacks, the Kelvir-U worm sends an IM to people on an infected user's contact list that encourages the recipient to click on a URL link within the message. Once the link is opened, a version of the Spybot worm is downloaded and the worm then sends itself to the newly-infected user's contact list. Spybot opens up a backdoor on infected machines allowing them to be subsequently misused by hackers for nefarious purposes, such as distributing spam. ®

Related stories

MSN Messenger worm seeds zombie networks
Bofra exploit tied to 'massive botnet'
Botched maintenance - not worm - blamed for MS IM glitch
Download.Ject-style worm spreads via IM

alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe